Evaluating the NSA's Telephony Metadata Program

Interesting analysis: "Examining the Anomalies, Explaining the Value: Should the USA FREEDOM Act's Metadata Program be Extended?" by Susan Landau and Asaf Lubin. Abstract: The telephony metadata program which was authorized under Section 215 of the PATRIOT Act, remains one of the most controversi...

barevnenitky.cz Cross Site Scripting vulnerability

Security Researcher MitRauch Helped patch 270 vulnerabilities Received 3 Coordinated Disclosure badges Received 5 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting barevnenitky.cz website and its users. Following coordinate...

gundogcentral.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-931997 Security Researcher KhanJanny Helped patch 3072 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting gundogcentral.com website...

playretrogames.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-931327 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting playretrogames.com website...

soltner.fr Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3650 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting soltner.fr website and its users. Following coordinated a...

journals.library.columbia.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-930785 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

sallecortot.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-930668 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting sallecortot.com website an...

princesselizabeth.org Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3650 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting princesselizabeth.org website and its users. Following...

voluncorp.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-930003 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting voluncorp.com website and...

rugbyready.worldrugby.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-928916 Security Researcher KhanJanny Helped patch 3072 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting rugbyready.worldrugby.org...

PT-2019-4732 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.7 through 6.9 Wind River VxWorks version vx7 Description: The issue is related to errors in the TCP Urgent Pointer state during the "connect" operation to a remote host. Exploitation of this issue may allow a...

qoly.jp Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-928314 Security Researcher IAMMUSTAFA Helped patch 521 vulnerabilities Received 9 Coordinated Disclosure badges Received 51 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting qoly.jp website and its...

coxsackie-athens.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-928076 Security Researcher kprankawat Helped patch 13 vulnerabilities Received 1 Coordinated Disclosure badges Received 4 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting coxsackie-athens.org websit...

ACSC Releases Advisory on Password Spraying Attacks

The Australian Cyber Security Centre ACSC has released an advisory on password spraying attacks. Password spraying is a type of brute-force attack in which a malicious actor uses a single password against targeted user accounts before moving on to attempt a second password, and so on. This...

PT-2019-13785 · Adplug Team · Adplug

Name of the Vulnerable Software and Affected Versions: AdPlug version 2.3.1 Description: The issue is a heap-based buffer overflow in the CdtmLoader::load function located in dtm.cpp. Recommendations: For AdPlug version 2.3.1, consider avoiding the use of the CdtmLoader::load function until a pat...

lillnord.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-926957 Security Researcher geeknik Helped patch 8957 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting lillnord.de website and its...

istos.swapi.com.br Cross Site Scripting vulnerability

Security Researcher KhanJanny Helped patch 2643 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting istos.swapi.com.br website and its users. Following...

world.rugby Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting world.rugby website and its users. Following coordinated a...

hudozhkavp.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-925654 Security Researcher geeknik Helped patch 8722 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting hudozhkavp.ru website and i...

PT-2019-5099

Name of the Vulnerable Software and Affected Versions Django versions 1.11.x through 1.11.22 Django versions 2.1.x through 2.1.10 Django versions 2.2.x through 2.2.3 Description The issue is related to the django.utils.text.Truncator class, specifically the chars and words methods. When these...